Description
The Director database component of MiVoice Connect through 19.3 (22.22.6100.0) could allow an authenticated attacker to conduct a code-injection attack via crafted data due to insufficient restrictions on the database data type.
Advisories 1
- WID-SEC-2022-1706 Mitel MiVoice Connect: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Feb 21, 2023